Re: How to choose an IDS/FW MSS provider

[Sasser <sasser () no-log org>]

This is where local expertise is a must - I would favour a small, local MSS

> that could give me instant support during a crisis, rather than from someone
> who only offers a SOC hundreds of miles away...
>
> Regards,
>
> Tim
>   
>  
Hi Tim, I take an example.

My Company is worldwide, big multinational and I do sell sodas or 
anything sweet related to sugar. I've got representations worldwide (5 
continents), like everywhere including Mongolia, Pakistan and Peru. Can 
a local company help my MSS project? Not sure at all. Can ISS help me? 
Maybe or who else?

Also, for the false alarms, I believe SOC engineering would ask the 
customer to provide them with accurate informations on the systems 
around and stress the customer to keep it up to date, or manage 
scheduled network scans with IS or whatever a local provider can do with 
tools like Nessus or Retina ;-)

Thanks,

Sasser

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------